Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9941B9CA542711F1A337F519CF1D38B0.roa
File: 9941B9CA542711F1A337F519CF1D38B0.roa (raw, json)
Hash identifier: alnQtPXuTVILu1+XnN8JNvbrw/u/AZSCYnb7GnFZh8E=
Subject key identifier: 7A:AE:54:78:25:5D:E5:21:A5:83:2B:33:B4:68:25:20:CF:3B:93:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9941B9CA542711F1A337F519CF1D38B0.roa
Signing time: Wed 20 May 2026 08:40:48 +0000
ROA not before: Wed 20 May 2026 08:40:43 +0000
ROA not after: Wed 19 Aug 2026 08:40:43 +0000
asID: 400619
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117938 (0x1ccb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 08:40:43 2026 GMT
Not After : Aug 19 08:40:43 2026 GMT
Subject: CN=6a0d7390-5f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:c0:1d:67:7c:17:78:87:6e:a2:50:06:5f:
e3:d7:f7:4a:2f:ed:0a:1b:e4:90:44:7e:b0:38:96:
2e:96:ef:42:d2:ec:0c:5e:a2:21:49:7e:d7:3a:e7:
8a:8b:9e:18:09:07:34:e1:36:03:dc:6c:03:59:69:
07:83:e2:2a:a8:5e:71:24:d1:e3:e2:bb:d6:b7:c8:
c1:10:ee:ff:e2:b5:3b:08:7f:4c:2d:5a:82:b9:7b:
71:af:c2:ab:53:e6:27:6d:2b:b3:c7:ea:c6:b5:bc:
fa:8b:41:1e:55:02:8f:9c:da:0c:85:6d:b2:25:85:
90:81:04:c5:19:60:a0:27:be:e4:e3:7b:e6:19:9e:
12:ef:c4:58:d9:bb:a9:63:a1:3c:36:74:db:9b:8c:
ab:b7:00:8b:5a:e4:43:ea:9c:c0:70:e6:67:cd:82:
7f:d0:59:01:db:f5:29:bd:f1:aa:aa:1a:7c:c9:c4:
5c:cb:a7:66:fd:c2:f5:95:c5:29:6c:a6:57:78:eb:
9d:c3:22:f2:0a:fa:9d:6b:c5:8a:f7:c6:40:71:4c:
c0:96:fc:4c:b5:3a:98:f6:46:99:da:79:d3:0e:89:
21:18:b3:81:ff:6d:a3:df:9f:a3:b0:46:72:9d:d6:
bf:6d:35:be:e1:c7:4c:1a:58:08:16:19:ce:9b:aa:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AE:54:78:25:5D:E5:21:A5:83:2B:33:B4:68:25:20:CF:3B:93:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9941B9CA542711F1A337F519CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:1f:75:25:61:7c:b9:e5:b9:21:9b:2f:c0:29:f3:e7:74:c9:
b1:32:f9:b1:50:31:7c:2b:6c:b3:38:85:3a:ea:8d:be:b6:45:
c3:76:6c:21:8c:01:67:74:d7:90:17:bb:98:48:15:f7:91:f5:
b9:6e:41:47:31:ea:85:3f:5c:ef:5e:03:2a:49:8c:94:31:3a:
05:36:ee:13:aa:51:e9:8a:12:93:35:2d:aa:9c:ec:fc:36:bd:
f5:86:11:61:fd:19:47:ba:b6:8f:c0:c6:a4:83:1a:9b:53:6c:
5e:99:57:60:c0:7a:43:8b:4b:86:e1:22:29:65:9a:43:de:0e:
00:9b:60:19:f9:b5:f9:70:cf:e9:fb:91:a7:d1:85:02:8b:2b:
e5:45:59:c0:0d:0f:5a:7e:ab:28:bb:df:7b:13:11:ba:7a:7d:
ab:5e:f1:84:8b:11:8b:e5:b7:8b:fe:ff:b4:95:e7:90:63:31:
57:93:75:97:17:71:20:20:f5:e2:88:27:7a:51:85:fe:27:92:
c5:6f:07:b9:9d:26:d0:97:fa:4e:7f:ee:81:02:b7:98:75:48:
bc:e1:4e:2b:43:4f:09:bb:6e:c9:ad:60:15:ba:4f:86:27:d5:
f7:ac:be:a1:e5:70:a3:12:4f:f6:46:6c:2a:2e:6e:ce:55:78:
cf:c3:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:35 2026 by rpki-client